一种SM4算法的双路径随机掩码方案  

A dual-path random masking scheme for SM4 algorithm

作　　者：李新超 钟卫东[1,2] 李栋 马双棚 LI Xinchao;ZHNOG Weidong;LI Dong;MA Shuangpeng(School of Cryptography Engineering,Engineering University of CAPF,Xi’an 710086,China;Key Laboratory for Network and Information Security of Chinese Armed Police Force,Engineering University of CAPF,Xi’an 710086,China)

机构地区：[1]武警工程大学密码工程学院,西安710086 [2]武警工程大学网络与信息安全武警部队重点实验室,西安710086

出　　处：《中国科技论文》2018年第14期1578-1583,共6页China Sciencepaper

基　　金：国家自然科学基金资助项目(U1636114;61572521)

摘　　要：针对SM4算法面临功耗攻击的严重威胁的问题,提出了一种改进的SM4双路径循环移位掩码方案。通过对初始明文和密钥信息进行随机掩码,并在轮函数中引入伪随机掩码S盒,开辟了2条与原始S盒完全不同的数据路径,可保证SM4算法加密过程中的所有原始中间值结果均被掩盖,切断功耗与中间值之间的相关性。安全性分析和实验验证,与无防护SM4算法相比,方案在功耗和实现面积增加不大的情况下,能够有效抵御功耗攻击。In view of the serious threat of power attack to the SM4 algorithm,an improved SM4 dual-path cyclic shift masking scheme is proposed in this paper.The scheme uses a random mask for the initial plaintext and key information,and introduces a pseudo random mask S-box in the wheel function,which opens two data paths completely different from the original S-boxes.All the original intermediate values in the encryption process are covered up,and the correlations between the power consumption and the intermediate values are cut off.Security analysis and experimental verification show that,compared with the unprotected SM4 algorithm,the proposed scheme can effectively resist the power attack when the power consumption and the increase of the area are small.

关 键 词：SM4算法 功耗攻击 双路径掩码 伪随机掩码S盒 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]